This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json) Hash identifier: knK64284P+NdTxi02Ypqs3b3pJ4quhx/0McVrcLJ2nA= Subject key identifier: 6D:18:37:04:02:93:33:C9:E2:8F:3A:48:01:47:E9:D0:BF:1E:CB:D8 Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4 Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4 Certificate serial: 019AF31B59D954ED753388CAC3574ACC2904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft Manifest number: 0DFB Signing time: Sat 06 Dec 2025 10:00:47 +0000 Manifest this update: Sat 06 Dec 2025 10:00:47 +0000 Manifest next update: Sun 07 Dec 2025 10:00:47 +0000 Files and hashes: 1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: knZop0Nzc5hyUOcMMX72NjTXF8P4cGcbV2rezmQPuhI=) 2: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (hash: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:59:d9:54:ed:75:33:88:ca:c3:57:4a:cc:29:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4 Validity Not Before: Dec 6 10:00:47 2025 GMT Not After : Dec 7 10:00:47 2025 GMT Subject: CN=6d183704029333c9e28f3a480147e9d0bf1ecbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d4:06:6d:4b:ff:74:10:8d:72:ae:a5:e6:a8: 9f:fc:8d:9e:19:3c:86:7d:ec:b4:87:8b:40:58:7b: f9:e1:13:e7:54:d9:f0:ab:70:21:1a:68:c4:48:ed: b9:12:33:79:68:50:7f:29:c1:af:65:a7:cf:18:4b: 6d:5c:45:a9:d5:42:af:c1:ac:27:f6:a5:15:11:cf: 31:bf:cd:70:7f:d6:42:b7:da:97:06:6f:7f:c3:4b: 9d:c0:c7:16:0b:9b:31:ad:25:b8:7f:0a:3c:6c:76: c1:03:97:e7:6a:ae:e3:4e:c1:0f:88:38:50:3c:07: bc:74:d3:5d:e4:83:a9:da:de:91:5c:a7:bb:f0:d8: d9:84:3b:45:fd:18:4c:3c:f9:0b:84:36:55:4a:cf: 2c:20:af:fd:3b:ca:bf:6d:ce:5c:4f:37:e2:44:23: 1a:eb:10:01:26:72:4a:d1:b0:7d:6d:64:1e:cc:96: 14:62:e8:90:08:f3:1e:b2:51:2d:3f:bb:96:60:ce: 44:f0:e3:b9:7b:cc:f5:ef:76:ae:16:2d:f1:4a:22: 29:fb:c4:61:e8:3c:4b:79:e3:cb:29:78:70:55:92: 31:9b:36:c6:4b:9c:d5:29:5b:b1:15:7f:ea:bb:bf: 1a:4c:7e:da:45:27:49:8c:1e:ac:21:27:28:89:2b: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:18:37:04:02:93:33:C9:E2:8F:3A:48:01:47:E9:D0:BF:1E:CB:D8 X509v3 Authority Key Identifier: keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0c:44:64:32:8e:df:c7:5d:1d:ed:72:4e:ac:43:ee:5c:5c: f2:4c:cb:76:38:53:f1:80:3b:56:2f:24:d2:03:56:2e:33:0e: fa:4e:d8:9c:43:65:cb:17:a4:d5:65:6d:ee:29:fb:a0:81:d9: fe:cf:17:92:75:80:e2:df:29:eb:14:7c:43:9a:a3:cd:35:0f: ec:fb:e6:97:24:50:62:ce:97:0f:28:be:34:cc:05:37:cc:ac: 85:5b:ff:3f:db:88:c4:18:1e:e2:c0:91:09:1e:0f:76:7e:06: c3:a2:18:5b:9a:10:af:82:94:5a:c6:98:7d:83:aa:f6:51:02: ce:b7:e8:69:29:b3:af:72:ae:a5:94:46:17:4d:5a:cc:61:d7: 38:3d:c8:63:0d:2b:1a:88:ab:6d:20:0e:a5:ae:7d:17:48:75: df:77:b0:a2:c7:5f:e0:0d:fd:78:e6:eb:d0:1c:3f:ac:a0:ba: b2:40:37:e2:24:81:6b:48:b3:49:55:e6:81:b3:27:a6:12:bf: 80:2d:b7:65:56:cf:c7:ad:02:c2:ac:64:34:6e:78:0c:35:87: 7d:ee:8f:f8:38:0f:ac:96:65:3b:3a:9a:e0:ce:38:71:eb:8a: 6b:b8:9c:50:87:82:98:de:cc:ae:b3:6c:0f:68:9a:b4:2f:aa: da:23:2d:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1nZVO11M4jKw1dKzCkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI4YTQxNWUxZmE3MmNlMWQwM2NkNzYyMTljZTFiNzdj NjU1YzQwHhcNMjUxMjA2MTAwMDQ3WhcNMjUxMjA3MTAwMDQ3WjAzMTEwLwYDVQQD Eyg2ZDE4MzcwNDAyOTMzM2M5ZTI4ZjNhNDgwMTQ3ZTlkMGJmMWVjYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NQGbUv/dBCNcq6l5qif/I2eGTyG fey0h4tAWHv54RPnVNnwq3AhGmjESO25EjN5aFB/KcGvZafPGEttXEWp1UKvwawn 9qUVEc8xv81wf9ZCt9qXBm9/w0udwMcWC5sxrSW4fwo8bHbBA5fnaq7jTsEPiDhQ PAe8dNNd5IOp2t6RXKe78NjZhDtF/RhMPPkLhDZVSs8sIK/9O8q/bc5cTzfiRCMa 6xABJnJK0bB9bWQezJYUYuiQCPMeslEtP7uWYM5E8OO5e8z173auFi3xSiIp+8Rh 6DxLeePLKXhwVZIxmzbGS5zVKVuxFX/qu78aTH7aRSdJjB6sIScoiSuMawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0YNwQCkzPJ4o86SAFH6dC/HsvYMB8GA1UdIwQY MBaAFAFiikFeH6cs4dA812IZzht3xlXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdLS1FWNGZweXpoMER6WFlobk9HM2ZHVmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84MWNlMzYtZjk1Mi00MjljLThmYmIt N2ZmOTJmNmRjM2E0LzEvQVdLS1FWNGZweXpoMER6WFlobk9HM2ZHVmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC84MWNlMzYtZjk1Mi00MjljLThmYmItN2ZmOTJmNmRjM2E0 LzEvQVdLS1FWNGZweXpoMER6WFlobk9HM2ZHVmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQxEZDKO 38ddHe1yTqxD7lxc8kzLdjhT8YA7Vi8k0gNWLjMO+k7YnENlyxek1WVt7in7oIHZ /s8XknWA4t8p6xR8Q5qjzTUP7PvmlyRQYs6XDyi+NMwFN8yshVv/P9uIxBge4sCR CR4Pdn4Gw6IYW5oQr4KUWsaYfYOq9lECzrfoaSmzr3KupZRGF01azGHXOD3IYw0r GoirbSAOpa59F0h133ewosdf4A39eObr0Bw/rKC6skA34iSBa0izSVXmgbMnphK/ gC23ZVbPx60CwqxkNG54DDWHfe6P+DgPrJZlOzqa4M44ceuKa7icUIeCmN7MrrNs D2iatC+q2iMt1w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:35 2025 by rpki-client